Description
SUSE Lifecycle Management Server (SLMS) before 1.3.7 uses world-readable permissions for the secret keys, which allows local users to gain privileges via unspecified vectors.
References
- SUSE-SU-2013:1813 vendor-advisory
- https://bugzilla.novell.com/show_bug.cgi?id=852101
- slms-cve20137042-information-disclosure(89897) vdb-entry
- 100652 vdb-entry